ISC CISSP Online Practice Questions and Exam Preparation

ISC CISSP Online Questions & Answers

• Question 841:

  Creation and maintenance of intrusion detection systems and processes for the following is one of them identify it:

  A. Event nonrepudiation
  B. Event notification
  C. Netware monitoring
  D. Guest access
  B. Event notification

• Question 842:

  What is the MOST important factor in establishing an effective Information Security Awareness Program?

  A. Obtain management buy-in.
  B. Conduct an annual security awareness event.
  C. Mandate security training.
  D. Hang information security posters on the walls,
  C. Mandate security training.

• Question 843:

  Why are mobile devices something difficult to investigate in a forensic examinition?

  A. There are no forensics tools available for examination.
  B. They may have proprietary software installed to protect them.
  C. They may contain cryptographic protection.
  D. They have password-based security at logon.
  B. They may have proprietary software installed to protect them.

• Question 844:

  An attacker has intruded into the source code management system and is able to download but not modify the code. Which of the following aspects of the code theft has the HIGHEST security impact?

  A. The attacker could publicly share confidential comments found in the stolen code.
  B. Competitors might be able to steal the organization's ideas by looking at the stolen code.
  C. A competitor could run their own copy of the organization's website using the stolen code.
  D. Administrative credentials or keys hard-coded within the stolen code could be used to access sensitive data.
  A. The attacker could publicly share confidential comments found in the stolen code.

• Question 845:

  Which of the following will accomplish Multi-Factor Authentication (MFA)?

  A. Issuing a smart card with a user-selected Personal Identification Number (PIN)
  B. Requiring users to enter a Personal Identification Number (PIN) and a password
  C. Performing a palm and retinal scan
  D. Issuing a smart card and a One Time Password (OTP) token
  A. Issuing a smart card with a user-selected Personal Identification Number (PIN)

• Question 846:

  Which of the following is the best practice for testing a Business Continuity Plan (BCP)?

  A. Test before the IT Audit
  B. Test when environment changes
  C. Test after installation of security patches
  D. Test after implementation of system patches
  B. Test when environment changes

• Question 847:

  What is the MOST effective way to ensure that a cloud service provider does not access a customer’s data stored within its infrastructure?

  A. Use the organization’s encryption tools and data management controls.
  B. Ensure that the cloud service provider will contractually not access data unless given explicit authority.
  C. Request audit logs on a regular basis.
  D. Utilize the cloud provider’s key management and elastic hardware security module (HSM) support.
  A. Use the organization’s encryption tools and data management controls.

• Question 848:

  A security practitioner has been asked to model best practices for disaster recovery (DR) and business continuity. The practitioner has decided that a formal committee is needed to establish a business continuity policy. Which of the following BEST describes this stage of business continuity development?

  A. Project Initiation and Management
  B. Risk Evaluation and Control
  C. Developing and Implementing business continuity plans (BCP)
  D. Business impact analysis (BIA)
  D. Business impact analysis (BIA)

• Question 849:

  Which of the following is the MOST effective attack against cryptographic hardware modules?

  A. Plaintext
  B. Brute force
  C. Power analysis
  D. Man-in-the-middle (MITM)
  C. Power analysis

• Question 850:

  Refer to the information below to answer the question.

  An organization has hired an information security officer to lead their security department. The officer has adequate people resources but is lacking the other necessary components to have an effective security program. There are numerous

  initiatives requiring security involvement.

  Given the number of priorities, which of the following will MOST likely influence the selection of top initiatives?

  A. Severity of risk
  B. Complexity of strategy
  C. Frequency of incidents
  D. Ongoing awareness
  A. Severity of risk